Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability exists in the Linux kernel's COMEDI driver for the National Instruments AT-MIO-16D device. When the driver's 'attach' function fails, the COMEDI core calls the 'detach' function to clean up. This process, however, can lead to issues because the 'detach' function unconditionally resets the device, potentially causing null pointer dereferences or erroneous writes to low I/O port addresses. The problem arises because the device may not be fully initialized after a failed attachment, leaving the I/O base address at its default of zero and the private data pointer null. The vulnerability affects several versions of the Linux kernel.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.